tocsin

CVE-2024-9107

1 advisory.

PyPI/chuanhuchatgpt CVE-2024-9107: medium 5.4, EPSS 0.57%

A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerability arises from improper sanitization of HTML tags i

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-2024-09-19

Fixed versions

No fixed version in the source.

Sources

CVE-2024-9107 · published · modified · JSON